I am self hosting Nextcloud at my domain nas.mydomain.sk via cloudflare tunnel. Since I didn’t want it to be on the internet, I also put a Cloudflare Zero trust challenge on *.mydomain.sk, so that I have to authenticate over email and then I can login to Nextcloud.
So far so good, everything is working as expected. However, I would like to share some files to my friends. So on Cloudflare I created a bypass rule for nas.mydomain.sk/s/*
When I generate a shareable link and open it in a browser that is authenticated with Cloudflare, I can see the page exactly as it is supposed to be, however when I open the link in a private window, I see only HTML text with no ability to download the file:
It is the same behavior when I try it in my phone’s internet browser that doesn’t have the cloudflare authentication in a regular non private non incognito window.
A better idea is to add to a share s/abcdefghijklmno the part /download e.g s/abcdefghijklmno/download. Than the user can download the file directly without JS and CSS. But in the sharing seetings you can then not activate hide download. But that would be wrong at this point anyway.